THREATOPS
THREAT OPS › Threat News › BdThemes plugins supply-chain hack creates rogue WordPress admins

BdThemes plugins supply-chain hack creates rogue WordPress admins

lowbleepingcomputerPublished 2026-08-10

A threat actor compromised the upstream infrastructure of BdThemes, a developer of premium WordPress web-design tools, and modified a remote JSON feed delivered to administrators' browsers to create rogue admin accounts. [...]

Original source: https://www.bleepingcomputer.com/news/security/bdthemes-plugins-supply-chain-hack-creates-rogue-wordpress-admins/

Same event, other sources